Select Language:
If you’ve set up a shared container registry for your Azure Machine Learning workspaces, you might find it tricky to delete it later. This can be frustrating, especially if you’re trying to free up resources or clean up your environment.
So, here’s a simple solution to get rid of that container registry and its associated resources without running into permission issues.
First, you’ll notice that deleting the registry directly in Azure Machine Learning Studio doesn’t work. The same goes for the Azure Portal — you can’t delete the resource group containing the registry, especially if it includes multi-region setup and replication. The reason? A Deny RBAC (Role-Based Access Control) assignment blocks your changes. This is a common security measure that prevents accidental deletion of important resources, but it can also stop you when you want to remove them.
The key to solving this problem is to modify or remove these Deny RBAC assignments. Here’s what you should do:
1. Open the Azure Portal and navigate to the resource group that contains your container registry.
2. Check if there are any Deny assignments under the “Access Control (IAM)” section.
3. If you find such policies, you’ll need to update your permissions. This usually requires having Owner or User Access Administrator rights.
4. Remove the Deny assignments or modify the role memberships to allow your user account to have the necessary permissions.
5. Once the Deny policies are gone, try deleting the resource group again.
Be aware that removing these restrictions might impact other users or processes, so confirm with your team before making changes.
By clearing the permission blocks, you’ll be able to delete the container registry and any related resources, helping you save costs and keep your environment tidy. Just remember, changing access controls should be done carefully to avoid unintended security issues.
Thanks for reading, and good luck clearing out those costly resources!



